IP Library Granted Patent US 10,866,279
Granted Patent B2
US 10,866,279 · App. 16/292,530 · Granted Dec 15, 2020

Monitoring accesses to a region of an integrated circuit chip

Inventor: Gajinder Singh Panesar (Cambridge, GB)
Assignee: ULTRASOC TECHNOLOGIES LIMITED
G01R31/31717G01R31/2803G01R31/2853G01R31/2884G01R31/2889G01R31/2896G01R31/66G06F11/2242H01L2224/48091H01L2924/00H01L2924/0002H01L2924/00014
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,866,279
App. No.
16/292,530
Granted
Dec 15, 2020
Kind
B2
Abstract

An integrated circuit chip comprising: system circuitry comprising interconnect circuitry for transporting transactions; and monitoring circuitry configured to: monitor transactions from the interconnect circuitry comprising transactions between an entity and a specified region of the integrated circuit chip, the entity being associated with a set of one or more access rights for accessing the specified region of the integrated circuit chip; determine from the monitored transactions values of one or more parameters associated with the access to the specified region by the entity to identify whether the entity has breached its access rights; and perform a dedicated action indicative of a breach of the access rights in response to determining from the parameter values that the entity has breached its access rights.

Claims (28)

1. An integrated circuit chip comprising:

system circuitry comprising interconnect circuitry for transporting transactions; and

monitoring circuitry configured to:

monitor transactions from the interconnect circuitry comprising transactions between an entity and a specified region of the integrated circuit chip, the entity being associated with a set of one or more access rights for accessing the specified region of the integrated circuit chip;

determine from the monitored transactions values of one or more parameters associated with the access to the specified region by the entity to identify whether the entity has breached its access rights; and

perform a dedicated action indicative of a breach of the access rights in response to determining from the parameter values that the entity has breached its access rights.

2. The integrated circuit chip as claimed in claim 1 , wherein the monitoring circuitry is configured to determine the values of the one or more parameters associated with the access to the specified region using the monitored transactions between the first entity and the specified region.

3. The integrated circuit chip as claimed in claim 1 , wherein the access rights are specified in terms of limiting values of the one or more parameters associated with the access to the specified region and the monitoring circuitry is configured to compare the values of the one or more parameters associated with the access to the specified region determined from the monitored transactions with the limiting values of those one or more parameters to identify whether the entity has breached its access rights.

4. The integrated circuit chip as claimed in claim 1 , wherein the one or more parameters associated with the access to the specified region include at least one of: a time value for each monitored transaction; the number of accesses to the specified region of the integrated circuit chip within a specified time interval; a state of the integrated circuit chip; a sequence of previous accesses made by the entity; whether the access was requested via a specified subsystem.

5. The integrated circuit chip as claimed in claim 1 , wherein the dedicated action indicative of a breach of the entity's access rights comprises one or more of: blocking access to the specified region of the integrated chip circuit by the entity; generating an alert signal; and outputting trace data of accesses to the specified region by the entity.

6. The integrated circuit chip as claimed in claim 1 , wherein the entity is located on the integrated circuit chip.

7. The integrated circuit chip as claimed in claim 1 , wherein the entity is a hardware entity.

8. The integrated circuit chip as claimed in claim 1 , wherein the entity is a logical entity.

9. The integrated circuit chip as claimed in claim 1 , wherein the specified region is a memory on the integrated circuit chip.

10. The integrated circuit chip as claimed in claim 1 , wherein the monitoring circuitry is configured to record in a storage unit information associated with accesses of the entity to the specified region over time to generate an access profile for the entity composed of one or more profile parameters.

11. The integrated circuit chip as claimed in claim 10 , wherein the monitoring circuitry is configured to analyze a set of one or more monitored transactions between the entity and the specified region to determine whether a corresponding set of accesses by the entity matches the generated access profile, and the monitoring circuitry is configured to perform the dedicated action further in response to determining that a set of one or more accesses by the entity does not match the generated access profile.

12. The integrated circuit chip as claimed in claim 10 , wherein the profile parameters include one or more of: frequency of accesses to the specified region by the entity; frequency of one or more types of access to the specified region by the entity; a sequence of accesses to regions of the integrated circuit chip by the entity.

13. The integrated circuit chip as claimed in claim 12 , wherein the one or more types of access to the specified region include at least one of: frequency of read accesses; frequency of write access; frequency of interrupts.

14. The integrated circuit chip as claimed in claim 1 , wherein the monitoring circuitry is further configured to use the monitored transactions to record in the storage unit information associated with accesses to the specified region of the integrated circuit chip over time to generate an access profile for the specified region composed of one or more profile parameters.

15. The integrated circuit chip as claimed in claim 14 , wherein the monitoring circuitry is configured to analyze a set of one or more monitored transactions involving the specified region to determine whether a corresponding set of accesses to the specified region matches the generated access profile for the specified region, and the monitoring circuitry is configured to perform the dedicated action further in response to determining that a set of accesses to the specified region does not match the access profile for the specified region.

16. The integrated circuit chip as claimed in claim 14 , wherein the one or more profile parameters composing the access profile for the specified region comprise at least one of: frequency of accesses to the specified region; frequency of types of accesses to specified region; timing of accesses to the specified region.

17. The integrated circuit chip as claimed in claim 16 , wherein the frequency of one or more types of access to the specified region include at least one of: frequency of read accesses; frequency of write access; frequency of interrupts.

18. The integrated circuit chip as claimed in claim 1 , wherein the monitoring circuitry is configured to monitor transactions for chip security, chip safety and/or during chip analytics.

19. A method of controlling access to a specified region of an integrated circuit chip, comprising:

monitoring transactions over interconnect circuitry of the integrated circuit chip comprising transactions between an entity and the specified region of the integrated circuit chip, the entity being associated with a set of one or more access rights to the specified region of the integrated circuit chip;

determining from the monitored transactions between the entity and the specified region of the integrated circuit chip values of one or more parameters associated with the access to the specified region by the entity to identify whether the entity has breached its access rights; and

in response to determining from the parameter values that the entity has breached its access rights, performing a dedicated action indicative of a breach of those access rights.

20. The method as claimed in claim 1 , wherein the method is performed for chip security, chip safety and/or during chip analytics.

Assignments (3)
MERGER AND CHANGE OF NAME Recorded Oct 7, 2021
From: MENTOR GRAPHICS CORPORATION; SIEMENS INDUSTRY SOFTWARE INC.
To: SIEMENS INDUSTRY SOFTWARE INC.
Reel/Frame 057728/0573 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 23, 2020
From: ULTRASOC TECHNOLOGIES LTD.
To: MENTOR GRAPHICS CORPORATION
Reel/Frame 054736/0771 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 14, 2019
From: PANESAR, GAJINDER SINGH
To: ULTRASOC TECHNOLOGIES LIMITED
Reel/Frame 048600/0284 →
Priority Claims (1)
GB 1803551.9 · Mar 6, 2018 · national
Continuity (1)
Related Publication 20190277912A1 · Sep 12, 2019
Cited By (3)
US 12,287,909 US 12,340,007 US 12,346,489